Change CRL refresh to run every 2 hours
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>
Mon, 19 Jun 2017 08:46:40 +0000 (11:46 +0300)
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>
Mon, 26 Jun 2017 14:24:26 +0000 (14:24 +0000)
commitfabb0b236e1eb21378b0cd214a96681bd2b0ba4a
treeae4d51d9a455235911a10a9ff6de2812f578cfd8
parent8ca7a1e390ce50ac66a6861dae59bb44fbf0324a
Change CRL refresh to run every 2 hours

The default CA issues CRLs for 4 hours by default. So we need to change
these values to reflect this, else we'll get verification issues due to
the CRL having expired before its refreshed.

However, the nextupdate value for the CRLs might not be aligned with the
cron job. And getting this alignment is not entirely trivial. So I opted
for updating every 2 hours to address this.

Change-Id: I732b400462c5cabd7c6c18c007fc9e8c87b700d3
manifests/certmonger/ca/crl.pp